Privacy Policy
Last updated: October 26, 2026
ExcursionAlert is a browser extension that monitors Disney Cruise excursion availability. This policy explains what data the extension accesses, what stays on your device, and what, if anything, leaves it.
What the extension accesses
When you visit the Disney Cruise excursion page, ExcursionAlert reads the authentication tokens and session identifiers that your browser already holds as part of your normal Disney login session. It uses these to poll Disney's availability API on your behalf, using the same requests the Disney website makes itself.
When you open an activity's guest selection on Disney's site, the extension also reads your party as Disney lists it: each guest's name, age, whether they're an adult, and which activities they've already booked. It uses this so you can choose who each alert is for, and to tell when a "conflict" is just your own existing booking. It also reads Disney's list of activities for the day you're viewing.
What stays on your device
Everything, with three narrow exceptions below. Specifically:
- Your Disney authentication tokens (Bearer token, session ID, SWID) are held in browser memory only and are never written to disk or transmitted to any server we operate.
- Your watchlist, party details, and alert settings are stored locally in your browser's extension storage.
- All availability polling happens directly from your browser to Disney's servers. No data passes through our infrastructure.
- Troubleshooting log: the extension keeps a record of its availability checks from the past 7 days, plus the latest copy of Disney's activity list and party details, so problems can be diagnosed if you ask for help. Your Disney login tokens, session IDs, license key, and ntfy topic are removed before anything is saved, and guests are recorded as "Passenger 1," "Passenger 2," and so on, never by name. The log never leaves your browser on its own.
What leaves your device
Three narrow cases:
- License validation: When you activate an Excursion Pass license key, your license key and Disney reservation ID are sent to a Cloudflare Worker we operate solely to verify your license and bind it to your reservation. No personal information is transmitted. The reservation ID is a numeric booking reference, not a name or contact detail.
- Push notifications: If you configure ntfy push notifications, availability alerts are sent to ntfy.sh with your chosen topic name. We do not operate ntfy.sh. Review ntfy's privacy policy for details on how they handle messages.
- Troubleshooting logs you choose to send: clicking Save troubleshooting log saves a file to your computer. It contains your alerts, your party's ages and booked activities, your reservation number, and what Disney returned for recent checks. It contains no names, login details, license key, or ntfy topic. It reaches us only if you email it to us. We use it only to resolve your support request, and we delete it once your issue is resolved.
Purchases
Excursion Pass purchases (on their own or as part of a Cruise Pass bundle) are processed by Gumroad. When you purchase, Gumroad collects your email address to deliver your license key. We do not receive or store your payment information or email address. Review Gumroad's privacy policy for details.
Analytics and tracking
The ExcursionAlert browser extension contains no analytics, no tracking pixels, and no third-party scripts. We do not know who installs the extension or how they use it.
This website (excursionalert.com) uses Cloudflare Web Analytics to see aggregate visit counts. It does not use cookies, does not track you across other sites, and does not build a profile tied to you individually.
Children's privacy
ExcursionAlert is not directed at children under 13 and does not knowingly collect any information from children.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page.
Contact
Questions? Use the feedback form.